David Garske fdfb0a9fe7 Merge pull request #10627 from julek-wolfssl/fenrir-fixes-20260601-dtls13-recv-epoch ...

F-5606: don't enforce DTLS 1.3 2^48-1 epoch cap on the receive side

2026-06-10 10:06:26 -07:00

..

bio.c

Merge pull request #10208 from ColtonWilley/bio-io-negative-length-checks

2026-05-05 11:32:21 -07:00

conf.c

Make sure large buffers are on the heap with SMALL_STACK

2026-04-19 20:38:41 +02:00

crl.c

Add negative length validation to d2i wrappers, PEM helpers, and buffer loaders

2026-05-27 11:36:38 -07:00

dtls13.c

F-5583: evict oldest DTLS 1.3 epoch slot, not the last eligible one

2026-06-03 13:01:19 +02:00

dtls.c

Cache AEAD record overhead on WOLFSSL

2026-05-28 16:19:44 +02:00

include.am

ssl.c: Move functions out to own files and add testing

2026-06-10 09:11:59 +10:00

internal.c

Merge pull request #10572 from Frauschi/lms_xmss_cert_gen

2026-06-10 11:14:43 -05:00

keys.c

Cache AEAD record overhead on WOLFSSL

2026-05-28 16:19:44 +02:00

ocsp.c

Merge pull request #10207 from ColtonWilley/d2i_pem_negative_length

2026-06-08 15:42:00 -07:00

pk_ec.c

Add d2i NULL-deref guards and regression tests

2026-05-27 15:38:30 -07:00

pk_rsa.c

Size cert signature buffers from the key and check sig type vs key

2026-06-10 10:51:41 +02:00

pk.c

F-4591: fix right-justification of short DH shared secret

2026-06-03 13:01:19 +02:00

quic.c

add missing WOLFSSL_QUIC_MAX_RECORD_CAPACITY check on the early-data path in quic_record_make() and added a unit test for it

2026-04-14 12:43:19 +02:00

sniffer.c

zero sensitive material before free

2026-05-14 16:59:48 +00:00

ssl_api_cert.c

ssl.c: Move functions out to own files and add testing

2026-06-10 09:11:59 +10:00

ssl_api_crl_ocsp.c

Add bounds check on wolfSSL_X509_notBefore and wolfSSL_X509_notAfter

2026-03-31 09:29:46 -07:00

ssl_api_dtls.c

ssl.c: Move functions out to own files and add testing

2026-06-10 09:11:59 +10:00

ssl_api_ext.c

ssl.c: Move functions out to own files and add testing

2026-06-10 09:11:59 +10:00

ssl_api_pk.c

ssl.c: Move functions out to own files and add testing

2026-06-10 09:11:59 +10:00

ssl_asn1.c

Merge pull request #10207 from ColtonWilley/d2i_pem_negative_length

2026-06-08 15:42:00 -07:00

ssl_bn.c

Add BN_bn2binpad API and enable OpenVPN master CI testing

2026-04-13 15:35:40 +02:00

ssl_certman.c

Finalize ML-DSA renaming

2026-05-26 14:54:30 +02:00

ssl_crypto.c

cryptocb: support WOLF_CRYPTO_CB_ONLY_SHA512

2026-06-04 20:21:50 +02:00

ssl_ech.c

Merge pull request #10469 from sebastian-carpenter/tls-ech-server-improvements

2026-05-23 00:07:40 +10:00

ssl_load.c

Add negative length validation to d2i wrappers, PEM helpers, and buffer loaders

2026-05-27 11:36:38 -07:00

ssl_misc.c

nginx 1.28.1

2026-02-25 15:19:13 +01:00

ssl_p7p12.c

honor OpenSSL fail-open contracts

2026-05-14 16:59:12 +00:00

ssl_sess.c

Check SNI/ALPN in TLS 1.2 stateful session ID resumption

2026-05-27 09:16:34 -04:00

ssl_sk.c

Add Python CI workflow and Blake2 EVP support

2026-03-06 08:27:41 +01:00

ssl.c

ssl.c: Move functions out to own files and add testing

2026-06-10 09:11:59 +10:00

tls13.c

F-5606: don't enforce DTLS 1.3 2^48-1 epoch cap on the receive side

2026-06-10 00:26:00 +02:00

tls.c

Check for EC_PF_UNCOMPRESSED in TLS 1.2 ClientHello

2026-06-10 11:37:40 +02:00

wolfio.c

Merge pull request #10290 from LinuxJedi/emnet

2026-05-05 11:46:15 -07:00

x509_str.c

zd/21661: harden X.509 chain validation, session ticket identity binding, and peer cert restore

2026-05-06 16:45:58 +02:00

x509.c

Merge pull request #10207 from ColtonWilley/d2i_pem_negative_length

2026-06-08 15:42:00 -07:00